Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/73o7yM4H9dzh1bTbIAtDXpZUB4Q.roa
File: 73o7yM4H9dzh1bTbIAtDXpZUB4Q.roa (raw, json)
Hash identifier: zumfF1zf72pfpt0URm9xu960nM9889+ernXMDUPr1UE=
Subject key identifier: EF:7A:3B:C8:CE:07:F5:DC:E1:D5:B4:DB:20:0B:43:5E:96:54:07:84
Certificate issuer: /CN=5d0a0d396f769369365f2b983c531afeca9710a7
Certificate serial: 018F145BC0ED882171B5F6A4EADE89B39707
Authority key identifier: 5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/73o7yM4H9dzh1bTbIAtDXpZUB4Q.roa
Signing time: Thu 25 Apr 2024 08:25:08 +0000
ROA not before: Thu 25 Apr 2024 08:25:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48350
IP address blocks: 45.148.236.0/22 maxlen: 22
45.148.236.0/24 maxlen: 24
45.148.237.0/24 maxlen: 24
45.148.238.0/24 maxlen: 24
45.148.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 09:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:14:5b:c0:ed:88:21:71:b5:f6:a4:ea:de:89:b3:97:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0a0d396f769369365f2b983c531afeca9710a7
Validity
Not Before: Apr 25 08:25:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef7a3bc8ce07f5dce1d5b4db200b435e96540784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:20:e5:fc:cc:95:cf:97:a6:70:bb:75:d2:34:
6a:63:09:84:bf:2b:1f:f7:3c:38:64:71:e3:3c:0d:
70:22:f7:fd:de:4d:97:33:76:f5:91:ac:a5:1d:46:
8a:8f:0a:96:a5:2c:8a:2c:e8:56:b7:27:4e:8e:4a:
33:ac:02:61:a4:8e:84:db:84:3b:88:e4:b5:24:b0:
cf:c1:4c:de:80:d8:6f:d3:8c:72:80:a8:ef:cf:88:
d2:77:d1:d3:b4:4c:7b:f2:7e:d8:28:e9:8c:9c:8e:
54:fa:b0:7e:ff:29:95:db:3e:50:86:69:80:32:60:
f3:38:67:c8:b4:b3:94:3a:2b:f3:8e:9d:db:0b:56:
75:33:90:a1:cf:19:4a:e2:4d:0b:64:9e:fe:6c:16:
94:a5:de:bb:4d:55:33:33:79:7e:1d:19:ed:18:a3:
fb:41:16:17:ab:ce:81:38:b3:6c:00:0b:5e:a2:c4:
eb:dc:c7:68:cf:1b:58:84:67:ec:1d:ec:82:ef:fc:
36:7e:7c:db:69:65:07:bd:a0:b6:10:d8:15:26:01:
52:0f:61:01:fe:62:e6:a9:bf:98:13:87:7a:ef:e7:
14:57:c4:81:38:34:d7:b8:7e:c3:6a:b3:69:69:a0:
5e:21:c6:66:d4:31:fb:05:03:13:a4:48:f0:e6:11:
62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7A:3B:C8:CE:07:F5:DC:E1:D5:B4:DB:20:0B:43:5E:96:54:07:84
X509v3 Authority Key Identifier:
keyid:5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/73o7yM4H9dzh1bTbIAtDXpZUB4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.236.0/22
Signature Algorithm: sha256WithRSAEncryption
57:b6:11:b2:0d:41:c7:bc:10:c8:ad:bf:7a:85:87:4b:a4:3e:
9e:f5:ea:33:20:39:3e:61:80:7e:66:8b:3e:e8:63:a0:1c:bd:
7c:a4:6b:07:cb:bd:0c:8d:a5:7b:73:52:c4:88:43:1c:23:1b:
8b:b6:3f:41:ae:8e:6f:b0:9c:f3:a1:78:0a:69:ad:97:da:1f:
3a:0b:68:9b:11:d6:e4:f1:85:e2:eb:f0:aa:d0:bf:c9:f4:f8:
ff:96:9c:02:41:ab:dc:72:50:0e:76:42:91:9f:e7:23:cb:1c:
f4:51:ed:5e:8c:6b:99:77:73:d9:0c:eb:c8:26:e1:2e:cb:ca:
4a:51:72:a3:b6:14:80:94:54:52:bd:17:7b:e8:96:2b:72:40:
45:c5:f3:42:db:99:90:a3:a0:d3:f1:e9:51:6d:fa:3f:a7:9a:
23:d9:44:b3:8d:61:d8:1a:50:29:04:75:36:bd:57:15:09:13:
0e:ca:8e:47:9c:23:18:36:64:ff:fd:68:c1:93:a6:87:44:9f:
f9:d6:dd:77:8c:0c:a4:95:cb:30:c9:b9:31:ef:08:78:15:5d:
16:3e:fb:4f:fa:5e:b9:3e:ca:14:6c:43:4a:06:f6:27:70:3a:
59:34:13:f7:37:a9:70:0a:57:27:1b:94:57:d0:03:07:84:d2:
6a:87:51:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:08:36 2025 by rpki-client